Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/sfD_I9hBRYkOn_cay96ab4iJ7OI.roa
File: sfD_I9hBRYkOn_cay96ab4iJ7OI.roa (raw, json)
Hash identifier: ulc2pO09BnmdKiTvj11ZGcEPXuzLVftL+Jw2RoVDtsk=
Subject key identifier: B1:F0:FF:23:D8:41:45:89:0E:9F:F7:1A:CB:DE:9A:6F:88:89:EC:E2
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 01A0BAB6097A762758DF8F3B071CCE0C2A1E
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/sfD_I9hBRYkOn_cay96ab4iJ7OI.roa
Signing time: Sat 19 Sep 2026 17:28:07 +0000
ROA not before: Sat 19 Sep 2026 17:28:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219283
IP address blocks: 2a0f:2380::/30 maxlen: 30
2a0f:2384::/30 maxlen: 30
2a0f:4680::/30 maxlen: 30
2a0f:4684::/30 maxlen: 30
2a0f:7106::/31 maxlen: 31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ba:b6:09:7a:76:27:58:df:8f:3b:07:1c:ce:0c:2a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Sep 19 17:28:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b1f0ff23d84145890e9ff71acbde9a6f8889ece2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f9:e1:f7:a7:d3:03:ec:e8:86:9b:e8:d8:b6:
ab:69:a8:d3:42:fc:05:d0:87:71:d1:14:9a:fa:08:
1e:00:93:f4:e4:40:40:5e:da:2e:fd:10:e3:42:43:
18:89:c7:c9:04:a3:71:e4:9c:09:f4:b8:5a:63:d9:
02:03:60:35:81:91:19:49:76:e1:9f:d3:44:84:5b:
7f:dc:dd:49:29:b4:8e:c5:28:ad:e6:dd:5c:b2:de:
99:9e:9f:3a:78:42:5e:49:4a:0d:66:17:41:35:14:
12:26:79:2b:1f:8e:06:b9:b2:a2:76:3e:97:b9:cb:
2f:cf:f1:5b:ff:8c:68:2d:2b:d2:44:c3:50:0c:c4:
ab:75:7b:33:63:fb:24:75:f4:9e:35:15:11:04:09:
73:c7:61:49:3b:98:03:45:0d:a7:f9:d9:3d:a5:79:
d0:6a:b0:72:7d:16:07:e9:39:e8:06:5d:00:b8:9f:
bf:94:db:83:c5:ad:f5:98:d2:c2:6a:ed:de:0e:70:
dd:72:c5:f5:90:b8:eb:3f:62:d3:90:3f:94:df:37:
c1:d1:f0:1b:0c:b2:06:30:9d:c1:63:cd:7c:b3:7b:
b8:77:92:79:71:f6:d0:31:1c:40:04:79:2a:55:cd:
64:02:f8:d9:cf:51:c1:01:39:63:86:ec:c8:6d:49:
93:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F0:FF:23:D8:41:45:89:0E:9F:F7:1A:CB:DE:9A:6F:88:89:EC:E2
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/sfD_I9hBRYkOn_cay96ab4iJ7OI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:2380::/29
2a0f:4680::/29
2a0f:7106::/31
Signature Algorithm: sha256WithRSAEncryption
82:0e:19:54:08:60:ca:30:5a:f6:ba:d6:5d:07:a1:86:36:11:
9a:64:15:80:5e:30:2c:d0:63:6e:10:48:f7:35:68:c0:f4:19:
12:62:70:32:a4:a1:6e:d7:00:22:cf:70:37:66:30:32:3d:01:
45:37:f9:9b:46:bc:60:0c:15:c9:ce:59:ea:50:59:51:14:88:
e8:98:84:ec:33:15:4b:1c:8d:ae:2d:63:76:a4:10:6a:c7:75:
e9:a0:f9:67:5a:99:ca:0a:6e:a7:81:7a:69:da:a2:42:aa:1d:
2f:34:db:84:2c:74:69:8b:6e:a8:04:03:e8:bc:b4:cd:17:70:
d0:2c:60:18:b3:21:09:6b:d4:73:9f:3b:79:ba:f2:ac:a2:19:
de:2a:b3:4f:61:f9:b8:cb:8d:7f:96:31:21:ae:a6:b4:0a:7a:
56:e8:a6:54:ea:90:7f:9b:b2:ff:0b:dc:d7:1c:15:b8:63:87:
19:9d:de:15:f4:96:d8:d2:5e:f4:61:80:60:f8:41:11:24:5a:
11:0a:48:9d:3c:f4:a7:ad:42:12:4b:f7:a5:77:2e:f6:f0:6b:
9f:da:7c:07:12:9b:c6:e3:8f:67:6f:15:d0:2e:d9:70:0f:c1:
b9:b8:50:c7:03:db:2d:96:00:c9:91:f5:87:1a:86:bb:36:55:
2d:a2:6f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:05:37 2026 by rpki-client